Security

What we collect, what we don't, and how to reach us about a security issue.

What we collect

  • ·Account info: email, name, and a hashed password — only if you register.
  • ·Usage data: the tweet URLs you submit, download timestamps, and video metadata.
  • ·Technical data: IP address, for rate limiting.
  • ·Payment data: handled entirely by Stripe — we never see or store your card details.

What we don't collect

  • We never sell your personal data.
  • We don't read your general browsing history.
  • No account or personal information is required to use the free tier.

Storage & retention

We are a transient intermediary, not a hosting service. A downloaded file is held on Cloudflare R2 only long enough for you to retrieve it and is automatically deleted within 24 hours. We keep a low-resolution thumbnail and basic metadata (title, source link) for longer, so frequently requested links can still be listed and fetched again on demand. Account data is stored in Cloudflare D1 and retained as long as your account is active.

Deleting your account

Delete your account from your dashboard. All associated data is removed within 30 days.

Payment processing

Payments are no longer accepted. Historical purchases were processed by Stripe; we never stored your card number or billing details.

Extension permissions

See the extension permissions page for a full breakdown of what the Chrome extension can and can't access.

Extension permissions

Report a security issue

Email support@xvideodownloader.org. We take security reports seriously and respond as quickly as we can.